[ 29.594275] audit: type=1800 audit(1544646548.216:28): pid=5990 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 30.412064] audit: type=1800 audit(1544646549.096:29): pid=5990 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 30.432658] audit: type=1800 audit(1544646549.096:30): pid=5990 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 [....] startpar: service(s) returned failure: ssh ...[?25l[?1c7[FAIL8[?25h[?0c failed! Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.169' (ECDSA) to the list of known hosts. 2018/12/12 20:29:20 fuzzer started 2018/12/12 20:29:22 dialing manager at 10.128.0.26:45517 2018/12/12 20:29:22 syscalls: 1 2018/12/12 20:29:22 code coverage: enabled 2018/12/12 20:29:22 comparison tracing: enabled 2018/12/12 20:29:22 setuid sandbox: enabled 2018/12/12 20:29:22 namespace sandbox: enabled 2018/12/12 20:29:22 Android sandbox: /sys/fs/selinux/policy does not exist 2018/12/12 20:29:22 fault injection: enabled 2018/12/12 20:29:22 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/12/12 20:29:22 net packet injection: enabled 2018/12/12 20:29:22 net device setup: enabled 20:32:23 executing program 0: openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x31, 0xffffffffffffffff, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r2, &(0x7f0000002640)=""/207, 0xfffffede, 0x0) mmap(&(0x7f00002a9000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) syzkaller login: [ 224.623647] IPVS: ftp: loaded support on port[0] = 21 20:32:23 executing program 1: request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00', 0xffffffffffffffff, 0x400000000000000}, &(0x7f0000001fee)="520972697374e363757367725669583a4465", 0x0) [ 224.931395] IPVS: ftp: loaded support on port[0] = 21 20:32:23 executing program 2: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xe6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x2d3, &(0x7f0000000200), 0x0, &(0x7f0000000480)=[{0x10}], 0x10}}], 0x5ec5f144db556138, 0x0) [ 225.217971] IPVS: ftp: loaded support on port[0] = 21 20:32:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_IF_NETNSID={0x8}]}, 0x28}}, 0x0) [ 225.786611] IPVS: ftp: loaded support on port[0] = 21 [ 225.938762] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.976829] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.001507] device bridge_slave_0 entered promiscuous mode [ 226.099286] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.120297] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.130015] device bridge_slave_1 entered promiscuous mode 20:32:24 executing program 4: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00', 0xffffffffffffffff, 0x400000000000000}, &(0x7f0000001fee)="520972697374e363757367725669643a4465", 0x0) syz_open_dev$mice(0x0, 0x0, 0x10040) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x80004003, 0x0) [ 226.272982] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 226.383466] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 226.410867] IPVS: ftp: loaded support on port[0] = 21 [ 226.830051] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 226.939213] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 226.969821] bridge0: port 1(bridge_slave_0) entered blocking state 20:32:25 executing program 5: getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffe7c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2286, &(0x7f0000000200)) [ 227.000455] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.019828] device bridge_slave_0 entered promiscuous mode [ 227.111572] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 227.119457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 227.211068] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.224799] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.241362] device bridge_slave_1 entered promiscuous mode [ 227.265037] IPVS: ftp: loaded support on port[0] = 21 [ 227.398710] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 227.447915] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.464836] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.481502] device bridge_slave_0 entered promiscuous mode [ 227.521737] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 227.591956] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.598438] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.628279] device bridge_slave_1 entered promiscuous mode [ 227.738358] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 227.779699] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 227.791499] team0: Port device team_slave_0 added [ 227.832887] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.839369] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.848186] device bridge_slave_0 entered promiscuous mode [ 227.910343] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 227.924969] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 227.946362] team0: Port device team_slave_1 added [ 227.965075] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 227.992805] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.999312] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.016059] device bridge_slave_1 entered promiscuous mode [ 228.087500] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 228.112967] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 228.121251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 228.166913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 228.179709] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 228.223936] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 228.308701] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 228.346447] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 228.401921] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 228.410835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 228.418908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 228.475099] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 228.528241] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 228.566641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 228.579614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 228.638845] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 228.661192] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 228.668119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 228.772541] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 228.802055] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 228.817521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 228.854939] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 228.881085] team0: Port device team_slave_0 added [ 228.893119] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 228.914219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 228.977635] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.987300] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.996854] device bridge_slave_0 entered promiscuous mode [ 229.007974] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 229.017624] team0: Port device team_slave_1 added [ 229.054213] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 229.069651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.121910] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.128404] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.150524] device bridge_slave_1 entered promiscuous mode [ 229.179715] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 229.189085] team0: Port device team_slave_0 added [ 229.205416] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.269079] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 229.326231] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 229.340851] team0: Port device team_slave_1 added [ 229.362254] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 229.376402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 229.493581] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 229.501284] team0: Port device team_slave_0 added [ 229.538037] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.551858] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 229.566756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.611017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 229.635179] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 229.655603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 229.665052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 229.676956] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 229.688991] team0: Port device team_slave_1 added [ 229.722859] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 229.730835] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.737219] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.761536] device bridge_slave_0 entered promiscuous mode [ 229.778447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.788784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 229.808674] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 229.840997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.850945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 229.890891] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 229.902310] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 229.909593] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.918150] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.941817] device bridge_slave_1 entered promiscuous mode [ 229.952223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 229.969940] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.992430] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 230.008988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.042265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.055401] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 230.067338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.077774] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.092473] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 230.101756] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 230.173512] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 230.186552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.207921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.232846] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 230.280600] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 230.287521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 230.324020] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 230.351520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.367797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.387987] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.394640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.401952] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.408335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.417427] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 230.620264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 230.681309] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 230.800837] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 230.830644] team0: Port device team_slave_0 added [ 230.852784] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 230.973498] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 230.981397] team0: Port device team_slave_1 added [ 231.001800] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 231.017227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 231.130516] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 231.137443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 231.150723] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 231.160441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 231.182078] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 231.314608] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.321090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.327769] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.334219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.362566] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 231.373784] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 231.467974] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 231.480921] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.492322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.549525] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 231.571948] team0: Port device team_slave_0 added [ 231.601713] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 231.609353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.621896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.664764] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 231.682202] team0: Port device team_slave_1 added [ 231.687492] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.693955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.700726] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.707133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.722204] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 231.728690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.740621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.797785] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 231.813470] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.819855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.826575] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.832985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.857089] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 231.863666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 231.881273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 231.950844] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 231.957756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 231.970904] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 232.096570] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 232.105539] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 232.115712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 232.240480] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 232.247654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 232.260904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 232.743249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 233.148441] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.154914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.161696] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.168108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.177489] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 233.703351] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.709779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.716498] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.722914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.762911] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 233.776664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 233.784576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 235.130319] list_add corruption. prev->next should be next (ffffffff8a1dca60), but was ffff8881c69feb70. (prev=ffff8881c37c0bb0). [ 235.142682] ------------[ cut here ]------------ [ 235.147456] kernel BUG at lib/list_debug.c:28! [ 235.152130] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 235.157514] CPU: 0 PID: 7057 Comm: ip Not tainted 4.20.0-rc6-next-20181210+ #164 [ 235.165075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 235.174455] RIP: 0010:__list_add_valid.cold.2+0x23/0x2a [ 235.179863] Code: e8 00 1f d2 fd 0f 0b 48 89 d9 48 c7 c7 20 e6 80 88 e8 ef 1e d2 fd 0f 0b 48 89 f1 48 c7 c7 a0 e6 80 88 48 89 de e8 db 1e d2 fd <0f> 0b 90 90 90 90 90 55 48 89 e5 41 57 41 56 49 be 00 00 00 00 00 [ 235.198777] RSP: 0018:ffff8881dac06dc0 EFLAGS: 00010286 [ 235.204170] RAX: 0000000000000075 RBX: ffffffff8a1dca60 RCX: 0000000000000000 [ 235.211457] RDX: 0000000000000000 RSI: ffffffff816621c5 RDI: 0000000000000005 [ 235.218737] RBP: ffff8881dac06dd8 R08: ffff8881c426a440 R09: ffffed103b585020 [ 235.226014] R10: ffffed103b585020 R11: ffff8881dac28107 R12: ffff8881c4aed930 [ 235.233301] R13: ffff8881c4aed6c0 R14: ffffffff8a1dc820 R15: ffffffff8a1dcab0 [ 235.240579] FS: 00007f42f064b700(0000) GS:ffff8881dac00000(0000) knlGS:0000000000000000 [ 235.248812] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.254698] CR2: 00007fff46afd000 CR3: 00000001d19fd000 CR4: 00000000001406f0 [ 235.261978] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 235.269259] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 235.276531] Call Trace: [ 235.279131] [ 235.281300] ___neigh_create+0x14b7/0x2600 [ 235.285559] ? neigh_remove_one+0x5a0/0x5a0 [ 235.289888] ? print_usage_bug+0xc0/0xc0 [ 235.293959] ? graph_lock+0x270/0x270 [ 235.297779] ? find_held_lock+0x36/0x1c0 [ 235.301855] ? ipv6_chk_mcast_addr+0x350/0x940 [ 235.306460] ? lock_downgrade+0x900/0x900 [ 235.310611] ? check_preemption_disabled+0x48/0x280 [ 235.315637] ? kasan_check_read+0x11/0x20 [ 235.319792] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 235.325083] ? lock_acquire+0x1ed/0x520 [ 235.329078] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 235.334626] ? check_preemption_disabled+0x48/0x280 [ 235.339650] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 235.345196] ? rcu_pm_notify+0xc0/0xc0 [ 235.349099] __neigh_create+0x30/0x40 [ 235.352912] ip6_finish_output2+0xa64/0x2940 [ 235.357363] ? irq_exit+0x17f/0x1c0 [ 235.361000] ? smp_apic_timer_interrupt+0x1cb/0x760 [ 235.366049] ? find_held_lock+0x36/0x1c0 [ 235.370110] ? ip6_forward_finish+0x560/0x560 [ 235.374609] ? ip6_mtu+0x39c/0x520 [ 235.378157] ? lock_downgrade+0x900/0x900 [ 235.382307] ? check_preemption_disabled+0x48/0x280 [ 235.387329] ? kasan_check_read+0x11/0x20 [ 235.391480] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 235.396760] ? rcu_read_unlock_special+0x370/0x370 [ 235.401732] ? ip6_mtu+0x160/0x520 [ 235.405272] ? find_match+0x10a0/0x10a0 [ 235.409248] ? kasan_check_read+0x11/0x20 [ 235.413397] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 235.418680] ip6_finish_output+0x58c/0xc60 [ 235.422920] ? ip6_finish_output+0x58c/0xc60 [ 235.427329] ip6_output+0x232/0x9d0 [ 235.430955] ? ip6_finish_output+0xc60/0xc60 [ 235.435363] ? ip6_fragment+0x38b0/0x38b0 [ 235.439513] ? ip6_mtu_from_fib6+0x770/0x770 [ 235.443927] mld_sendpack+0xad5/0xfa0 [ 235.447733] ? nf_hook.constprop.40+0x860/0x860 [ 235.452421] ? _raw_read_unlock_bh+0x30/0x40 [ 235.456836] ? trace_hardirqs_off_caller+0x310/0x310 [ 235.461948] ? __local_bh_enable_ip+0x160/0x260 [ 235.466617] mld_ifc_timer_expire+0x447/0x8a0 [ 235.471123] call_timer_fn+0x272/0x920 [ 235.475010] ? mld_dad_timer_expire+0x1b0/0x1b0 [ 235.479690] ? process_timeout+0x40/0x40 [ 235.483767] ? mark_held_locks+0xc7/0x130 [ 235.487937] ? _raw_spin_unlock_irq+0x27/0x80 [ 235.492429] ? _raw_spin_unlock_irq+0x27/0x80 [ 235.496917] ? mld_dad_timer_expire+0x1b0/0x1b0 [ 235.501589] ? lockdep_hardirqs_on+0x296/0x5b0 [ 235.506172] ? trace_hardirqs_on+0xbd/0x310 [ 235.510494] ? kasan_check_read+0x11/0x20 [ 235.514642] ? __run_timers+0x7da/0xc70 [ 235.518615] ? trace_hardirqs_off_caller+0x310/0x310 [ 235.523722] ? mld_dad_timer_expire+0x1b0/0x1b0 [ 235.528404] __run_timers+0x7e5/0xc70 [ 235.532225] ? timer_fixup_init+0x70/0x70 [ 235.536375] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 235.541400] ? graph_lock+0x270/0x270 [ 235.545206] ? print_usage_bug+0xc0/0xc0 [ 235.549267] ? hrtimer_update_softirq_timer+0xa0/0xa0 [ 235.554457] ? find_held_lock+0x36/0x1c0 [ 235.558517] ? graph_lock+0x270/0x270 [ 235.562326] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 235.567863] ? check_preemption_disabled+0x48/0x280 [ 235.572894] ? __lock_is_held+0xb5/0x140 [ 235.576966] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 235.582503] ? check_preemption_disabled+0x48/0x280 [ 235.587519] run_timer_softirq+0x52/0xb0 [ 235.591582] ? rcu_read_lock_sched_held+0x14f/0x180 [ 235.596613] __do_softirq+0x308/0xb7e [ 235.600417] ? ktime_get_raw_ts64+0x4d0/0x4d0 [ 235.604909] ? lock_downgrade+0x900/0x900 [ 235.609079] ? __irqentry_text_end+0x1f9658/0x1f9658 [ 235.614191] ? pvclock_read_flags+0x160/0x160 [ 235.618688] ? lapic_next_event+0x5a/0x90 [ 235.622854] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 235.628423] ? kvm_clock_read+0x18/0x30 [ 235.632395] ? kvm_sched_clock_read+0x9/0x20 [ 235.636810] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 235.642355] ? check_preemption_disabled+0x48/0x280 [ 235.647376] irq_exit+0x17f/0x1c0 [ 235.650830] smp_apic_timer_interrupt+0x1cb/0x760 [ 235.655671] ? smp_reschedule_interrupt+0x109/0x650 [ 235.660705] ? smp_call_function_single_interrupt+0x650/0x650 [ 235.666590] ? interrupt_entry+0xb5/0xc0 [ 235.670653] ? trace_hardirqs_off_caller+0xbb/0x310 [ 235.675666] ? trace_hardirqs_off_caller+0xbb/0x310 [ 235.680681] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 235.685521] ? trace_hardirqs_on_caller+0x310/0x310 [ 235.690538] ? trace_hardirqs_on_caller+0x310/0x310 [ 235.695553] ? task_prio+0x50/0x50 [ 235.699092] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 235.704631] ? check_preemption_disabled+0x48/0x280 [ 235.709649] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 235.714498] apic_timer_interrupt+0xf/0x20 [ 235.718727] [ 235.720982] RIP: 0010:__sanitizer_cov_trace_cmp4+0x0/0x20 [ 235.726522] Code: ff 5d c3 0f 1f 80 00 00 00 00 55 0f b7 d6 0f b7 f7 bf 02 00 00 00 48 89 e5 48 8b 4d 08 e8 08 ff ff ff 5d c3 66 0f 1f 44 00 00 <55> 89 f2 89 fe bf 04 00 00 00 48 89 e5 48 8b 4d 08 e8 ea fe ff ff [ 235.745849] RSP: 0018:ffff8881813b66f8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 235.753840] RAX: 0000000000000007 RBX: ffff8881c35d0cc0 RCX: ffffffff862b5816 [ 235.761107] RDX: 0000000000000000 RSI: 0000000000007ec0 RDI: 0000000000005a74 [ 235.768373] RBP: ffff8881813b6730 R08: ffff8881c426a440 R09: ffffed10301b1aa4 [ 235.775640] R10: ffffed10301b1aa4 R11: ffff888180d8d524 R12: 0000000000005a74 [ 235.782909] R13: 0000000000007ec0 R14: 0000000000000000 R15: 000000000000000c [ 235.790190] ? skb_put+0xc6/0x1e0 [ 235.793649] ? skb_put+0x16d/0x1e0 [ 235.797194] __nla_reserve+0x2a/0xc0 [ 235.800914] __nla_put+0x28/0x40 [ 235.804286] nla_put+0x10d/0x150 [ 235.807655] rtnl_fill_ifinfo+0x114c/0x4670 [ 235.811983] ? rtnl_setlink+0x440/0x440 [ 235.815962] ? __pagevec_lru_add+0x30/0x30 [ 235.820201] ? mark_held_locks+0x130/0x130 [ 235.824439] ? get_mem_cgroup_from_mm.part.62+0x204/0x880 [ 235.829984] ? __lock_acquire+0x62f/0x4c20 [ 235.834223] ? rcu_dynticks_curr_cpu_in_eqs+0x80/0x170 [ 235.839510] ? lru_cache_add+0x417/0xa50 [ 235.843573] ? lru_cache_add_file+0x20/0x20 [ 235.847902] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 235.853450] ? print_usage_bug+0xc0/0xc0 [ 235.857519] ? lock_page_memcg+0x350/0x350 [ 235.861760] ? print_usage_bug+0xc0/0xc0 [ 235.865825] ? __this_cpu_preempt_check+0x1c/0x20 [ 235.870672] ? print_usage_bug+0xc0/0xc0 [ 235.874735] ? mark_held_locks+0xc7/0x130 [ 235.878891] ? __lock_acquire+0x62f/0x4c20 [ 235.883129] ? graph_lock+0x270/0x270 [ 235.886936] ? __lock_acquire+0x62f/0x4c20 [ 235.891182] ? mark_held_locks+0x130/0x130 [ 235.895424] ? mark_held_locks+0x130/0x130 [ 235.899659] ? print_usage_bug+0xc0/0xc0 [ 235.903725] ? __lock_acquire+0x62f/0x4c20 [ 235.907960] ? kasan_check_read+0x11/0x20 [ 235.912111] ? do_raw_spin_trylock+0x270/0x270 [ 235.916696] ? fault_dirty_shared_page.isra.87+0x320/0x320 [ 235.922325] ? print_usage_bug+0xc0/0xc0 [ 235.926391] ? graph_lock+0x270/0x270 [ 235.930196] ? __handle_mm_fault+0xa57/0x5b70 [ 235.934698] ? graph_lock+0x270/0x270 [ 235.938497] ? find_held_lock+0x36/0x1c0 [ 235.942563] ? find_held_lock+0x36/0x1c0 [ 235.946632] ? is_bpf_text_address+0xac/0x170 [ 235.951128] ? lock_downgrade+0x900/0x900 [ 235.955280] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 235.960557] ? rcu_read_unlock_special+0x370/0x370 [ 235.965485] ? rcu_softirq_qs+0x20/0x20 [ 235.969456] ? unwind_dump+0x190/0x190 [ 235.973348] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 235.978546] ? validate_nla+0x29a/0x1650 [ 235.982609] ? nla_memcmp+0x90/0x90 [ 235.986260] ? save_stack+0xa9/0xd0 [ 235.989892] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 235.995431] ? __nla_parse+0x12c/0x3e0 [ 235.999321] rtnl_dump_ifinfo+0x9de/0x14b0 [ 236.003574] ? rtnl_fill_ifinfo+0x4670/0x4670 [ 236.008081] ? __kmalloc_node_track_caller+0x3c/0x70 [ 236.013189] ? rcu_read_lock_sched_held+0x14f/0x180 [ 236.018208] ? kmem_cache_alloc_node_trace+0x351/0x740 [ 236.023506] ? kasan_unpoison_shadow+0x35/0x50 [ 236.028137] ? pskb_put+0xb0/0xb0 [ 236.031597] ? netlink_skb_destructor+0x190/0x210 [ 236.036444] ? kasan_check_write+0x14/0x20 [ 236.040681] netlink_dump+0x606/0x1080 [ 236.044570] ? netlink_broadcast+0x50/0x50 [ 236.048807] ? __sk_queue_drop_skb+0x1f0/0x1f0 [ 236.053390] ? lock_release+0xa00/0xa00 [ 236.057363] ? perf_trace_sched_process_exec+0x860/0x860 [ 236.062844] netlink_recvmsg+0xf6f/0x1480 [ 236.066994] ? netlink_dump+0x1080/0x1080 [ 236.071153] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 236.076693] ? aa_label_sk_perm+0x91/0x100 [ 236.080930] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 236.085858] ? aa_sk_perm+0x22b/0x8e0 [ 236.089660] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 236.095202] ? import_iovec+0x2a3/0x4b0 [ 236.099199] ? aa_af_perm+0x5a0/0x5a0 [ 236.103006] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 236.108559] ? _copy_from_user+0xdf/0x150 [ 236.112719] ? apparmor_socket_recvmsg+0x29/0x30 [ 236.117492] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 236.123038] ? security_socket_recvmsg+0x9c/0xc0 [ 236.127808] ? netlink_dump+0x1080/0x1080 [ 236.131959] sock_recvmsg+0xd0/0x110 [ 236.135672] ? __sock_recv_ts_and_drops+0x420/0x420 [ 236.140690] ___sys_recvmsg+0x2b6/0x680 [ 236.144664] ? do_raw_spin_unlock+0xa7/0x330 [ 236.149079] ? ___sys_sendmsg+0x930/0x930 [ 236.153229] ? graph_lock+0x270/0x270 [ 236.157056] ? graph_lock+0x270/0x270 [ 236.160862] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 236.166404] ? __fget_light+0x2e9/0x430 [ 236.170379] ? fget_raw+0x20/0x20 [ 236.173835] ? find_held_lock+0x36/0x1c0 [ 236.177903] ? __do_page_fault+0x62e/0xd70 [ 236.182152] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 236.187701] ? sockfd_lookup_light+0xc5/0x160 [ 236.192203] __sys_recvmsg+0x11a/0x280 [ 236.196104] ? __ia32_sys_sendmmsg+0x100/0x100 [ 236.200685] ? kasan_check_write+0x14/0x20 [ 236.204934] ? up_read+0x225/0x2c0 [ 236.208501] ? up_read_non_owner+0x100/0x100 [ 236.212923] ? do_syscall_64+0x9a/0x820 [ 236.216898] ? do_syscall_64+0x9a/0x820 [ 236.220890] ? trace_hardirqs_off_caller+0x310/0x310 [ 236.226000] __x64_sys_recvmsg+0x78/0xb0 [ 236.230077] do_syscall_64+0x1b9/0x820 [ 236.233964] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 236.239329] ? syscall_return_slowpath+0x5e0/0x5e0 [ 236.244261] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 236.249115] ? trace_hardirqs_on_caller+0x310/0x310 [ 236.254138] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 236.259161] ? prepare_exit_to_usermode+0x291/0x3b0 [ 236.264180] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 236.269046] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 236.274241] RIP: 0033:0x7f42efd6c210 [ 236.277979] Code: 31 d2 48 29 c2 64 89 11 48 83 c8 ff eb ea 90 90 90 90 90 90 90 90 90 90 90 90 83 3d e5 d3 2a 00 00 75 10 b8 2f 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 6e bb 00 00 48 89 04 24 [ 236.296890] RSP: 002b:00007fff46afa988 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 236.304602] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f42efd6c210 [ 236.311867] RDX: 0000000000000000 RSI: 00007fff46afa9d0 RDI: 0000000000000003 [ 236.319136] RBP: 0000000000003960 R08: 00007f42f0015ec8 R09: 00007f42efdb2c00 [ 236.326403] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006395c0 [ 236.333672] R13: 00007fff46afea60 R14: 0000000000003960 R15: 00007fff46afe370 [ 236.340943] Modules linked in: [ 236.344208] ---[ end trace 39b8a0e3f893c183 ]--- [ 236.348980] RIP: 0010:__list_add_valid.cold.2+0x23/0x2a [ 236.354368] Code: e8 00 1f d2 fd 0f 0b 48 89 d9 48 c7 c7 20 e6 80 88 e8 ef 1e d2 fd 0f 0b 48 89 f1 48 c7 c7 a0 e6 80 88 48 89 de e8 db 1e d2 fd <0f> 0b 90 90 90 90 90 55 48 89 e5 41 57 41 56 49 be 00 00 00 00 00 [ 236.373306] RSP: 0018:ffff8881dac06dc0 EFLAGS: 00010286 [ 236.378679] RAX: 0000000000000075 RBX: ffffffff8a1dca60 RCX: 0000000000000000 [ 236.385977] RDX: 0000000000000000 RSI: ffffffff816621c5 RDI: 0000000000000005 [ 236.393268] RBP: ffff8881dac06dd8 R08: ffff8881c426a440 R09: ffffed103b585020 [ 236.400569] R10: ffffed103b585020 R11: ffff8881dac28107 R12: ffff8881c4aed930 [ 236.407844] R13: ffff8881c4aed6c0 R14: ffffffff8a1dc820 R15: ffffffff8a1dcab0 [ 236.415134] FS: 00007f42f064b700(0000) GS:ffff8881dac00000(0000) knlGS:0000000000000000 [ 236.423378] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 236.429246] CR2: 00007fff46afd000 CR3: 00000001d19fd000 CR4: 00000000001406f0 [ 236.436530] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 236.443819] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 236.451104] Kernel panic - not syncing: Fatal exception in interrupt [ 236.458676] Kernel Offset: disabled [ 236.462300] Rebooting in 86400 seconds..